e04a779ccf35aeebfd7db9c2272d7f32_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e04a779ccf35aeebfd7db9c2272d7f32_JaffaCakes118
Size

35KB
MD5

e04a779ccf35aeebfd7db9c2272d7f32
SHA1

a3a60e67bc56cca0a87ae40efbb7072028dde666
SHA256

43e003d95fefebb15afd20d0e7a631b5bc0cc7497cfc45286b3fad4ea4e37046
SHA512

fd5e0233c19ffba929342b4323dc5977767341f8da5c716e1a13188553e9216b5fd39cc53377ac6e156b92b1aeb8ce1a3a81ea8cb16f5551e50723f8769f374e
SSDEEP

768:7UTIhZgECBuyzifP2EZgZ3BfajRzsa1hEKVUj1qtDeZ:Sy69YZ2BijRoa1hEQ5DeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e04a779ccf35aeebfd7db9c2272d7f32_JaffaCakes118

Files

e04a779ccf35aeebfd7db9c2272d7f32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c12a01e30079389b44677d0c31b22d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

wsprintfA
SendMessageA
AttachThreadInput
GetWindowLongA

gdi32

GdiFlush

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ